I want to log commands executed by an application server(resin) to catch things like "cat /etc/passwd" or "whoami" being executed by user resin.
However, since the user resin uses a /bin/false shell, I can't just edit bashrc file as suggested here
So what are my options to do that?
euid=0with the UID number for your resin user and you're done. – HBruijn Sep 15 '17 at 07:47